SEARCH RESULTS
 
Showing 1-10 of 186 records
 
Expand article

Ransomware Encrypts Victim Files With 1024-Bit Key

2008-06-11 14:48:17 by Editor in Digg / Security
 
A dangerous new strain of malicious software that holds the victim's computers files for ransom has been unleashed, and researchers have yet to crack the encryption key
 
Tags: malicious software, computers files, encryption key, victim, researchers, ransom, dangerous, holds, strain
 
 
 
 
Expand article

Email Hacking Going Commercial - Part Two

The Article has images
2008-08-08 14:31:54 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...victim to you for a suitable price. Nothing unique that we can brag about.... We don't hack NASA or CIA , we cannot hack a bank and steal a million dollars.. We just crack email password .. AND WE DO A HECK OF A JOB IN IT !! We cannot be as presentable as the other groups, trying to look as formal and corporate, as if they are running a Major...
 
Tags: crack password, crack, crack email password, email password, password, original password, current password, password retrieval, email
 
 
 
 
Expand article

Automating web application security testing

2007-07-16 11:40:00 by Panayiotis Mavrommatis in Google Online Security Blog
 
...victim's web session. Any web application that serves documents that include data from untrusted sources could be vulnerable to XSS if the untrusted data is not appropriately sanitized. A web application that is vulnerable to XSS can be exploited in two major ways Stored XSS - Commonly exploited in a web application where one user enters...
 
Tags: web application, application, input, input parameters, accepts user input, xss, xss vulnerabilities, security, security team check
 
 
 
 
Expand article

Automating web application security testing

2007-07-16 11:40:00 by Panayiotis Mavrommatis in Google Online Security Blog
 
...victim's web session. Any web application that serves documents that include data from untrusted sources could be vulnerable to XSS if the untrusted data is not appropriately sanitized. A web application that is vulnerable to XSS can be exploited in two major ways Stored XSS - Commonly exploited in a web application where one user enters...
 
Tags: web application, application, input, input parameters, accepts user input, xss, xss vulnerabilities, security, security team check
 
 
 
 
Expand article

Consultant loses laptop with Park National employee information

The Article has images
2008-05-16 11:23:50 by Evan Francen in The Breach Blog
...Victims past and present employees Number Affected 2,000 Types of Data personal information Breach Description About 2,000 past and present employees of Park National Corp. are keeping their fingers crossed that they don't become identity theft victims after their pension administrator lost a laptop computer containing their personal...
 
Tags: park national, park national breach, information, park, park national corp, personal information, breach, park national corporation, information security
 
 
 
 
Expand article

Leave Your Webcam On 24/7? Might Want To Reconsider...

The Article has images
2008-09-01 15:46:09 by Christopher Boyd in SpywareGuide Greynets Blog
...victims once they've compromised the PC (as long as they have a webcam switched on, of course). Similarly, hacking culture has always had a fascination for memes, incorporating them into part of the design of their latest DDoS tools However, the strange obsession with shock memes has now spilled into a "fun" game currently doing the rounds...
 
Tags: shockmeme site, site, meme site fired, shock, shock meme websites, webcam, shock meme site, shock meme website, webcam feed
 
 
 
 
Expand article

SDL and Web 2.0

2008-02-28 22:26:00 by sdl in The Security Development Lifecycle
 
...victim and essentially commit a form of identity theft The attack Ive shown here is known as a persistent Cross-Site Scripting (XSS) attack, and is the most dangerous form of XSS since it doesnt require any social engineering like reflective and DOM-based XSS attacks do. The victim doesnt have to do anything unusual he just has to browse to...
 
Tags: web, site, chriss web site, mashups, web mashups, site cookies, persistent cross-site, cookies, benefit anyones web
 
 
 
 
Expand article

Catalina Conservancy Divers donors are warned

The Article has images
2008-03-17 13:32:50 by Evan Francen in The Breach Blog
...Victims Donors Number Affected 816 Types of Data Donor information including credit card numbers, expiration dates and possibly CVV2 codes Breach Description Hammonds, 36, was able to obtain the names and credit card numbers of hundreds of victims when they made online donations to the Catalina Conservancy Divers site he was hired to...
 
Tags: catalina conservancy, conservancy, catalina conservancy divers, hammonds, trevor hammonds, victims names, names, victims, online donations
 
 
 
 
Expand article

University of California Irvine students are hit with mysterious breach

The Article has images
2008-04-10 12:14:10 by Evan Francen in The Breach Blog
...Victims current and former UCI graduate students and medical students Number Affected more than 100 identified victims at UCI Types of Data Tax information Breach Description April 9 Update: UC Irvine has received more than 100 reports that Social Security numbers have been stolen and used to file fraudulent tax returns to gain refunds ...
 
Tags: irvine, irvine police department, police, students, contact campus police, credit agencies, credit, irvine police, medical students
 
 
 
 
Expand article

Web Email Exploitation Kit in the Wild

The Article has images
2008-04-16 13:42:23 by HASH0x8ab1c88 in